AWS Cloud Security & Infrastructure Engineer

JEFFERSON NDIFOR

AWS CLOUD SECURITY ENGINEER CLOUD ENGINEER CLOUD INFRASTRUCTURE SPECIALIST

**** ********* ** ***********, ******** • Phone: +1-202-***-**** • Email: ****************@*****.*** LinkedIn: linkedin.com/in/ndifor-jefferson-3a9269263/ PROFESSIONAL SUMMARY

AWS Cloud Security and Infrastructure professional with hands-on experience designing, deploying, securing, and automating cloud environments. Strong technical knowledge of AWS security architecture, multi-account governance, identity and access management, network security, infrastructure as code, and cloud monitoring. Experienced in working with AWS services including EC2, VPC, IAM, S3, CloudFront, AWS WAF, GuardDuty, Security Hub, CloudTrail, Lambda, Route 53, RDS, ECS, SNS, SQS, and EventBridge. Proficient in CI/CD pipeline automation

(Jenkins, Nexus, SonarQube, Trivy), Terraform, Python/Boto3 scripting, Linux administration, and cloud security scanning with Prowler. Knowledgeable in Microsoft Azure identity and access management (Microsoft Entra ID, RBAC, ABAC). Seeking an intermediate-level AWS Cloud Security Engineer or Cloud Engineer position. CORE TECHNICAL COMPETENCIES

AWS Cloud Architecture

AWS Organizations, Control Tower, EC2, S3, VPC, Route 53, Application Load Balancers, Auto Scaling, RDS

MySQL, DynamoDB, ECS, CloudFront, Multi-AZ

Architecture.

AWS Security & Scanning

IAM roles/policies, AWS WAF, AWS Shield, GuardDuty, Security Hub, CloudTrail, CloudWatch, Least-Privilege Architecture, Prowler, Trivy, SonarQube, OWASP Top 10. Infrastructure Automation & CI/CD

Jenkins, CI/CD Pipelines, Nexus Repository, Terraform

(IaC), Python, Boto3, Bash, PowerShell, AWS Lambda, EventBridge, Git.

Cloud Networking & OS

Linux Administration, TCP/IP, DNS, DHCP, CIDR/

Subnetting, NAT/Internet Gateways, VPC Routing,

Windows Server, Active Directory.

HANDS-ON CLOUD ENGINEERING PROJECTS

Highly Available Three-Tier AWS Architecture

Technologies: EC2, VPC, ALB, Auto Scaling, RDS, Route 53, NAT Gateway, Terraform Designed a three-tier AWS architecture with isolated public and private subnets across multiple Availability Zones. Configured Application Load Balancers, Auto Scaling Groups, and Amazon RDS MySQL for scalable multi-AZ deployment.

Automated complete infrastructure provisioning and routing best practices using Terraform. AWS Cloud Security, Scanning and Threat Detection

Technologies: GuardDuty, Security Hub, CloudTrail, Prowler, Trivy, SonarQube, IAM, AWS WAF Implemented security monitoring and threat detection workflows using GuardDuty and Security Hub for centralized findings.

Executed cloud security posture assessments using Prowler and container/vulnerability scanning with Trivy. Configured CloudTrail auditing, CloudWatch alerting, and code analysis with SonarQube while enforcing least-privilege policies.

DevSecOps CI/CD Automation & Infrastructure Management Technologies: Jenkins, Nexus, SonarQube, Trivy, Terraform, Python, Boto3, Linux Built automated CI/CD pipelines using Jenkins integrated with Nexus artifact storage, SonarQube code quality checks, and Trivy security scans.

Developed IaC workflows using Terraform and leveraged Python/Boto3 scripts for automated Linux and AWS resource management.

AWS Serverless Event-Driven Architecture

Technologies: Lambda, EventBridge, SQS, SNS, CloudWatch Architected event-driven workflows utilizing EventBridge triggers, SQS message queuing, and SNS notification alerts. AWS Web Application Protection

Technologies: CloudFront, AWS WAF, Route 53, CloudTrail Protected web applications via CloudFront distribution paired with custom AWS WAF rules to defend against OWASP Top 10 vulnerabilities.

•

•

•

•

•

•

•

•

•

•

EDUCATION & CERTIFICATIONS

University of Louisiana at Lafayette

Completed Cloud Engineering coursework.

Contact this candidate